CISSP Domain 6: Security Assessment & Testing – Complete Mind Map & Review 📊

Review of the major Security Assessment and Testing concepts and terms, and how they interrelate, to help you review, guide your studies, and help you pass the CISSP exam.

This MindMap review covers:
0:00 Introduction
0:40 Purpose of Security
1:04 Security and Testing
1:40 Validation
1:58 Verification
2:09 Rigour
2:34 Testing and System
2:43 Unit Testing
3:05 Interface Testing
3:17 Integration Testing
3:28 System Testing
3:37 Testing Techniques
3:50 Manual Testing
4:02 Automated Testing
4:12 Runtime
4:17 Static Testing
4:25 Dynamic Testing
4:31 Fuzz Testing
4:56 Access to Code
5:19 Software Testing Techniques
5:24 Positive Testing
5:39 Negative Testing
5:59 Misuse Testing
6:18 Boundary Value Analysis
6:30 Equivalence Partitioning
6:43 Operational Testing
6:51 Real User Monitoring
7:02 Synthetic Performance Monitoring
7:19 Regression Testing
7:29 Testers / Assessors
9:30 Roles in Audit
10:23 Metrics
10:48 KPIs
10:59 KRIs
11:13 Outro


Other MindMaps:

Domain 1
Security & Risk Management: https://youtu.be/geGALIfOxtI

Domain 2
Asset Classification: https://youtu.be/aN9zkmzYTmQ
Privacy: https://youtu.be/lrI4QIa8S2I

Domain 3
Models and Frameworks: https://youtu.be/qZB6_lp9M30
Evaluation Criteria: https://youtu.be/WqHmDL7YAvw
Trusted Computing Base: https://youtu.be/fwU7n_3h058
Vulnerabilities in Systems: https://youtu.be/fPUypU7ysMw
Cloud: https://youtu.be/-rWQ7YuxiLY
Cryptography: https://youtu.be/LLRaa0kOMDM
Digital Certificates, Digital Signatures & PKI: https://youtu.be/8XKdFSG3ua4
Cryptanalysis: https://youtu.be/pnITDgs63M4
Physical Security: https://youtu.be/7ESQwNJ9HXU

Domain 5
Access Control Overview: https://youtu.be/BUcoABZzeQ4
Single Sing-on & Federated Access: https://youtu.be/_U4QMIxVk8M

Domain 6
Security Assessment and Testing Overview: https://youtu.be/eDVZvw5NziA
Vulnerability Assessment and Penetration Testing: https://youtu.be/vZ0S8GdWiIk
Logging & Monitoring: https://youtu.be/cwcARccyWyY

Domain 7
Investigations: https://youtu.be/Urev5cZgny8
Incident Response: https://youtu.be/PwxFwndQ7Jk
Malware: https://youtu.be/SVbrRozyIpo
Patching & Change Management: https://youtu.be/xX4U6Lz82Bk
Recovery Strategies: https://youtu.be/DrrfrJBnx28
Business Continuity Management (BCM): https://youtu.be/oAjNL3I_3-E

Domain 8
Secure Software Development: https://youtu.be/fS5WWjuyFmQ
Databases: https://youtu.be/-70DBd6cNDw

CISSP Master Instructor, John Berti: https://www.linkedin.com/in/jberti/
Visuals, narration and CISSP Master Instructor, Rob Witcher: https://www.linkedin.com/in/robwitcher/
Video editing by Nick: threntinfo@gmail.com